https://sources.debian.org/data/main/p/plib/1.8.5-8/debian/patches/05_CVE-2012-4552.diff

diff -up plib-1.8.5/src/ssg/ssgParser.cxx~ plib-1.8.5/src/ssg/ssgParser.cxx
--- plib-1.8.5/src/ssg/ssgParser.cxx~	2008-03-11 03:06:23.000000000 +0100
+++ plib-1.8.5/src/ssg/ssgParser.cxx	2012-11-01 15:33:12.424483374 +0100
@@ -57,18 +57,16 @@ void _ssgParser::error( const char *form
   char msgbuff[ 255 ];
   va_list argp;
 
-  char* msgptr = msgbuff;
-  if (linenum)
-  {
-    msgptr += sprintf ( msgptr,"%s, line %d: ",
-      path, linenum );
-  }
-
   va_start( argp, format );
-  vsprintf( msgptr, format, argp );
+  vsnprintf( msgbuff, sizeof(msgbuff), format, argp );
   va_end( argp );
 
-  ulSetError ( UL_WARNING, "%s", msgbuff ) ;
+  if (linenum)
+  {
+    ulSetError ( UL_WARNING, "%s, line %d: %s", path, linenum, msgbuff ) ;
+  } else {
+    ulSetError ( UL_WARNING, "%s", msgbuff ) ;
+  }
 }
 
 
@@ -78,18 +76,16 @@ void _ssgParser::message( const char *fo
   char msgbuff[ 255 ];
   va_list argp;
 
-  char* msgptr = msgbuff;
-  if (linenum)
-  {
-    msgptr += sprintf ( msgptr,"%s, line %d: ",
-      path, linenum );
-  }
-
   va_start( argp, format );
-  vsprintf( msgptr, format, argp );
+  vsnprintf( msgbuff, sizeof(msgbuff), format, argp );
   va_end( argp );
 
-  ulSetError ( UL_DEBUG, "%s", msgbuff ) ;
+  if (linenum)
+  {
+    ulSetError ( UL_DEBUG, "%s, line %d: %s", path, linenum, msgbuff ) ;
+  } else {
+    ulSetError ( UL_DEBUG, "%s", msgbuff ) ;
+  }
 }
 
 // Opens the file and does a few internal calculations based on the spec.
method='get' action='/guix/log/gnu/services/herd.scm'>
<input type='hidden' name='id' value='ebd00a4e917461ba770be60637b2b041795b2f44'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=ebd00a4e917461ba770be60637b2b041795b2f44'>root</a>/<a href='/guix/log/gnu?id=ebd00a4e917461ba770be60637b2b041795b2f44'>gnu</a>/<a href='/guix/log/gnu/services?id=ebd00a4e917461ba770be60637b2b041795b2f44'>services</a>/<a href='/guix/log/gnu/services/herd.scm?id=ebd00a4e917461ba770be60637b2b041795b2f44'>herd.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/services/herd.scm?id=ebd00a4e917461ba770be60637b2b041795b2f44&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2023-07-21 11:58:44 -0400'>2023-07-21</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=f15c5edb1a2423402b32a5262627eb2141becf65'>services: herd: Add a new 'current-service' procedure.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/herd.scm (current-service): New procedure, mostly reusing the
existing current-services.
(current-services): Implement in terms of the above procedure.
</span></span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2023-05-30 00:15:29 +0200'>2023-05-30</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=d23d8fcee99e7b127f9e649925caca9cf0d36e76'>services: herd: "Resolve" transient services only when needed.</a><span class='msg-avail'>...<span class='msg-tooltip'>This allows us to get rid of the "eval root" actions, which in turn
would lead to confusing "Evaluating user expression" messages.

Fixes &lt;https://issues.guix.gnu.org/55857&gt;.

* gnu/services/herd.scm (resolve-transients): In 'values', avoid
'eval-there' call when UNRESOLVED is empty.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2023-04-21 16:16:37 +0200'>2023-04-21</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=95731b4ef1991f5b85aa9ec9d4fb97c006bec65d'>services: herd: 'load-services/safe' is synonymous with 'load-services'.</a><span class='msg-avail'>...<span class='msg-tooltip'>This is a followup to 547965aa27b6a09cadf42130b7ec7db3f1aee61f.

* gnu/services/herd.scm (load-services/safe): Make an alias for
'load-services'.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2023-03-26 23:24:23 +0200'>2023-03-26</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=547965aa27b6a09cadf42130b7ec7db3f1aee61f'>services: herd: Remove workaround for Shepherd &lt; 0.5.0.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/herd.scm (load-services/safe): Remove workaround for
Shepherd &lt; 0.5.0, released in 2018.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-05-28 23:23:36 +0200'>2022-05-28</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=b04ae71defe0bd2a5fbd2df07d55cfe3eb40cba9'>services: herd: Add 'wait-for-service'.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/herd.scm (wait-for-service): New procedure.
</span></span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2022-04-10 00:17:40 +0200'>2022-04-10</span></td><td><a href='/guix/commit/gnu/services/herd.scm?id=a2c759c8304c461d096ab763568e7f71546ff4e8'>services: herd: Report whether a service is transient.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/services/herd.scm (&lt;live-service&gt;)[transient?]: New field.
(current-services): Check the value of 'transient?'.  Call
'resolve-transients'.
(resolve-transients): New procedure.
</span></span></td><td>Ludovic Courtès</td></tr>